Welcome to my personal repository — A focused journey toward mastering the art of exploit development, from initial foothold to full root access.
This project documents my hands-on work across leading offensive security platforms such as TryHackMe, Hack The Box (HTB), PortSwigger Labs, and real-world vulnerabilities I encounter in the wild or lab.
This repository showcases my work in developing real-world exploits, written in C, Python 3, and other languages as needed.
Along the way, I will document every custom tool, script, and small utility I create — capturing the real effort, practice, and grind required to become an elite exploit developer.
I created this repository to focus on improving my skills in exploit development by building and sharing real, practical tools. While I have strong experience in analyzing code and identifying vulnerabilities, I realized that translating those insights into working, high-impact exploit scripts is where I want to level up further.
This project serves as a space where I’ll be regularly uploading:
- Custom exploits for web, cloud, and container-based vulnerabilities
- Automation scripts that chain multiple bugs into full user or root shell access
- Tools and PoCs designed to turn theoretical issues into real-world impact
- Writeups and research where I dissect and weaponize real vulnerabilities
- Exploit Development: Written manually in C, Python 3, and other languages as needed.
- Tools and Scripts: Utilities built for automation, research, or personal learning.
- Failed Scripts: Projects that didn't work the first time (or at all) — kept intentionally as part of my growth.
- Basic Projects: Very simple programs I made when learning new languages — because every expert was once a beginner.
- Family Projects: Small personal tools made for real-world needs, to sharpen practical coding skills.
- Technical Notes: Insights on mistakes, techniques learned, and breakthroughs achieved.
Every file here — whether small, broken, or polished — represents time invested, and skills sharpened.
You will see:
- Rough code.
- Broken exploits.
- Small beginner projects.
- Failures that most people would be too embarrassed to share.
I keep them intentionally — because true mastery is earned by surviving and learning through these phases.
Not hiding them. Not skipping them.